CVE-2026-7679 — Improper authentication in YunaiV yudao-cloud OAuth2TokenServiceImpl.java getAccessToken

A security flaw has been identified in YunaiV yudao-cloud up to version 2026.01, affecting the getAccessToken function in OAuth2TokenServiceImpl.java. Manipulation results in improper authentication. The attack can be initiated remotely, and an exploit has been publicly released and may be used in attacks.